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CLAIMS 



What is claimed is: 



\ 1. A process control system capable of executing a function after initiation 
thereoAthe process control system comprising: 
5 aVomputer having a memory and a processing unit; and 

a security module stored in the memory of the computer and adapted to be 
executed onthe processing unit of the computer, wherein the security module 
analyzes security information collected contemporaneously with the initiation of the 
function and in association therewith to determine whether the function should be 
10 executed. 



2. The security system of claim 1, wherein the process control system 
comprises a network and the function is initiated via a device external to the network. 



3. The security system of claim 2, wherein the device includes a client that 
generates a user interface to collect the security information. 



15 4. The security system ofvclaim 3, wherein the client passes the security 

V~ 

5. The security system of claim^l , further comprising a process control 
application stored in the memory of the computer and adapted to be executed on the 
processing unit of the computer, wherein th^process control application generates a 

20 security configuration interface for establishing a security parameter for the function 
executed by the process control system. 

6. The security system of claim 5, wherein the security parameter comprises 
data representative of a lock associated with the funcKpn executed by the process 
control system. 
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The security system of claim 5, wherein the security parameter comprises 
data representative of whether execution of the function requires the security 
information^ include a user identification and a password. 

8. The security system of claim 5, wherein the security parameter comprises 
data representative ofVhether execution of the function requires the security 
information to include verification information. 

9. The security systerrrof claim 1, wherein the process control system 

— \— — -— 

10. The security system of claii^l, further comprising a process control 
application stored in the memory of the computer and adapted to be executed on the 
processing unit of the computer, wherein the^process control application generates a 
user interface to collect the security information from the user. 
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I . A method of securing a process control system capable executing a 
function after initiation thereof wherein the process control system includes a 
memory, the method comprising the steps of: 

storing in the memory a security parameter associated with the function; 
collecting security information contemporaneously with the initiation of the 
function and in\association therewith; and 

determining whether to execute the function based on the collected security 
information and the stored security parameter. 



12. The method of claim 11, wherein: 

\ 

the process control system comprises a network comprising the memory; and 
the security information collecting step comprises the step of communicating 
with a device external to the network. 



13. The method of claim 12, wherein the security collecting information step 
comprises the steps of generating client resident in the device and providing a user 
interface using the client. 

14. The method of claim 12, ^herein the security collecting information step 
comprises the step of passing the security information in encrypted form from the 
device to the network. 



15. The method of claim 1 1 , wherein>the security parameter comprises data 
representative of whether execution of the function requires the security information 
to include a user identification and a password. 



16. The method of claim 1 1 , wherein the security parameters storing step 
comprises the step of generating a user interface for associating the function with a 
lock for which a user may be assigned a key. 
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1 7. The methocKof claim 1 1, wherein the security parameter comprises data 
representative of whether execution of the function requires the security information 
to include verification iniprmation. 
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18. Amethod of securing a process control system capable of execution of a 
function, the method comprising the steps of: 

establishing a communication link between the process control system and a 
device external thereto to provide for remote initiation of the execution of the 
function; \ 

generating a ufeer interface via the communication link for collection of 
security information; and 

determining whetner the remote initiation of the execution of the function is 
authorized based on the collected security information. 



19. The method of clain^l8, wherein the user interface generating step 
comprises the step of collecting the security information contemporaneously with the 
remote initiation of the execution o\the function. 
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20. A software system for a process control system capable of execution of a 
function, the software system comprising: 

a computer-readable medium; 

a first routineWored on the computer-readable medium that collects security 
information contemporaneously with the initiation of the function and in association 
therewith; and 

a second routine stored on the computer-readable medium that determines 
whether the execution of th§ function is authorized in accordance with the collected 
security information. 

21. The software system of claim 20, wherein the first routine is executed in a 
client-server configuration such that the collected security information is transmitted 
from a client to a server. 



22. The software system of claim 21, wherein the security information is 

. \ 

collected via a user interface at the client. 



\ 



23. The software system of claim 21, wherein the client is external to the 
process control system. 

24. The software system of claim 21, further comprising a third routine that 

\ 

encrypts the collected security information prior^to transmission from the client to the 
server. 



25. The software system of claim 20, further^comprising a configuration 
routine that establishes a security parameter for the function. 



26. The software system of claim 25, wherein tl^e security parameter 
comprises data representative of a lock associated with the' function. 
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27. The software system of claim 25, wherein the security parameter 
comprises data representative of whether execution of the function requires the 
security information to incJude a user identification and a password. 

28. The software system of claim 25, wherein the security parameter 
comprises data representativAof whether execution of the function requires the 
security information to include\erification information. 
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29. A software system for a process control system capable of execution of a 
function, the software system comprising: 

a computerYreadable medium; 

a first routine stored on the computer-readable medium that establishes a 
communication link Between the process control system and a device external thereto 
to provide for remote initiation of the execution of the function; 

a second routine\tored on the computer-readable medium that generates a user 
interface via the communication link for collection of security information; and 

a third routine stored on the computer-readable medium that determines 
whether the remote initiations f the execution of the function is authorized based on 
the collected security information. 

30. The software system of claim 29, wherein the second routine collects the 
security information in connectior^with the remote initiation of the execution of the 
function. 



31. The software system of claim 30, wherein the second routine collects the 
security information contemporaneously with the remote initiation of the execution of 
the function. \ 

\ 

. \ . ... 

32. The software system of claim 29, wherein the security information 
transmitted via the communication link is encrypted. 
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